NEW BOT Телеграм, страница

Activation of arbitrary intent due to unsafe deserialization - CVE-2020-0082

This leads to EoP in Android 10.
It could start any privileged intent without permission.
With this vulnerability it would be possible to silently install and uninstall any app.
https://github.com/0x742/CVE-2020-0082-ExternalVibration

GitHub

GitHub - 0x742/CVE-2020-0082-ExternalVibration: This repo contains a proof-of-concept for 📱🚀👑⚡, a deserialization vuln for local…

This repo contains a proof-of-concept for 📱🚀👑⚡, a deserialization vuln for local escalation of privilege to system_server in Android 10. This proof-of-concept only activates a privileged intent. - ...

8.69K views10:19

👍 21 👎💬

Android Security & Malware

A Special Attack Surface in Android (Ⅱ) — The dangerous deeplinks
https://security.oppo.com/en/noticeDetail?notice_only_key=NOTICE-1359026676922851328

9.1K views10:48

👍 28 👎 3 💬

Android Security & Malware

Using Frida to find hooks in Android applications (security products, malware, or even games deploying anti-cheat software)
https://corellium.com/blog/android-frida-finding-hooks

Corellium

Using Frida to Find Hooks | Corellium Support Center

Frida is a dynamic code instrumentation toolkit for developing, researching, and reversing applications.

11.4K views07:39

👍 53 👎💬

Android Security & Malware

Mobile malware evolution 2020
https://securelist.com/mobile-malware-evolution-2020/101029/

Securelist

Mobile malware evolution 2020

In 2020, Kaspersky mobile products and technologies detected 156,710 new mobile banking Trojans and 20,708 new mobile ransomware Trojans.

8.5K views08:31

👍 38 👎💬

Android Security & Malware

Use-After-Free in Browser Process that can be used to escape the Chromium sandbox on Android Devices
PoC + denoscription: https://microsoftedge.github.io/edgevr/posts/yet-another-uaf/

Microsoft Browser Vulnerability Research

Yet another RenderFrameHostImpl UAF

Introduction Back in 2020 while reviewing Chromium code, I found issue 1068395, a Use-After-Free in Browser Process that can be used to escape the Chromium sandbox on Android Devices. This is an interesting vulnerability as it’s a bug pattern that keeps happening…

9.39K views19:47

👍 26 👎 1 💬

Android Security & Malware

Vulnerability found in Aiwinn multiple OEM devices allow silent installation of attacker provided app [CVE-2020-0222]
https://bugs.chromium.org/p/apvi/issues/detail?id=36&q=&can=1

9.24K views07:39

👍 31 👎 3 💬

Android Security & Malware

APKLeaks - scans APK files for URIs, endpoints & secrets
Tool: https://github.com/dwisiswant0/apkleaks
Demo: https://fb.watch/40Jd7HoAqs/

GitHub

GitHub - dwisiswant0/apkleaks: Scanning APK file for URIs, endpoints & secrets.

Scanning APK file for URIs, endpoints & secrets. Contribute to dwisiswant0/apkleaks development by creating an account on GitHub.

9.98K views15:23

👍 52 👎 3 💬

Android Security & Malware

Android FluBot (aka Cabassous) - banking malware responsible for spam SMS campaings in Spain & Poland impersonates FedEx, DHL, Correos, Chrome.
FluBot has already infected more than 60,000 victims and stolen 11 million+ phone numbers
https://raw.githubusercontent.com/prodaft/malware-ioc/master/FluBot/FluBot.pdf

👍1

9.56K views13:31

👍 34 👎 1 💬

Android Security & Malware

How we could have tracked anyone's live location using Truecaller's "Guardians" app
https://www.pingsafe.ai/blog/hacking-truecallers-guardian-application-to-track-you

8.97K views12:18

👍 39 👎 1 💬

Android Security & Malware

Reverse Engineering a Flutter app by recompiling Flutter Engine
https://tinyhack.com/2021/03/07/reversing-a-flutter-app-by-recompiling-flutter-engine/

Tinyhack.com

Reverse Engineering a Flutter app by recompiling Flutter Engine

It is not easy to reverse engineer a release version of a flutter app because the tooling is not available and the flutter engine itself changes rapidly. As of now, if you are lucky, you can dump the classes and method names of a flutter app using darter…